./www/drupal8, Open source content management system

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 8.6.13, Package name: php71-drupal-8.6.13, Maintainer: pkgsrc-users

Drupal is a free web Content Management System (CMS) that allows an
individual or a community of users to easily publish, manage and organize
a wide variety of content on a website.

Drupal is ready to go from the moment you download it. It even has an
easy-to-use web installer! The built-in functionality, combined with dozens
of freely available add-on modules, will enable features such as: Content
Management Systems, Blogs, Collaborative authoring environments, Forums,
Peer-to-peer networking, Newsletters, Podcasting, Picture galleries, File
uploads/downloads and much more.


Required to run:
[textproc/php-json] [www/ap-php] [graphics/php-gd] [databases/php-pdo_mysql]

Required to build:
[www/apache24] [pkgtools/cwrappers]

Package options: apache, mysql

Master sites:

SHA1: a6dfd33869e5d24eac7b679d826cc2f92a982738
RMD160: e52265b267456eb99d5989d7abce794039cbaf5d
Filesize: 16735.79 KB

Version history: (Expand)


CVS history: (Expand)


   2019-03-21 12:42:00 by Patrick Welche | Files touched by this commit (3) | Package updated
Log message:
Update drupal8 to 8.6.13

* Drupal core - Cross-Site Scripting- SA-CORE-2019-004

Under certain circumstances the File module/subsystem allows a
malicious user to upload a file that can trigger a cross-site
scripting (XSS) vulnerability.
   2019-03-16 14:15:03 by Wen Heping | Files touched by this commit (3) | Package updated
Log message:
Update to 8.6.12

Upstream changes:
8.6.12
The third-party Twig library, which powers Drupal 8's theme system, recently \ 
released new versions (Twig 1.38.0 and 1.38.1) that introduced a fatal error for \ 
Drupal 8 sites using Composer. Drupal 8.6.11 was released yesterday with an \ 
update to Twig 1.38.2 in order to resolve that error. However, this update also \ 
led to a different regression for certain Drupal 8 themes that use Twig {% embed \ 
%} tags. This release hotfixes Drupal 8 to resolve that regression. No other \ 
changes are included.

8.6.11
This release resolves two critical issues affecting Drupal 8 site updates:

    The third-party Twig library, which powers Drupal 8's theme system, recently \ 
released a new minor version (1.38.0) that introduced a fatal error when used \ 
with Drupal 8. As a result, Drupal 8 sites managed with Composer encountered \ 
this fatal error when updating Twig to version 1.38.0 or 1.38.1. This release \ 
updates Drupal to require Twig 1.38.2, which resolves the fatal error.

    The recent releases for SA-CORE-2019-003 introduced a serialized data \ 
integrity issue affecting some contributed and custom modules, including the \ 
Default Content and Paragraphs modules. This release resolves the issue for \ 
affected sites.

Additionally, this release resolves an administrator-only access bypass with the \ 
Layout Builder module. Previously, users who didn't have access to view \ 
individual entities were still granted access to configure the layout for that \ 
entity (if per-entity layout configuration was enabled) and therefore could view \ 
its content. This implicit access has been removed. Site owners should ensure \ 
that all content editor roles have access to view the content for which they are \ 
configuring the layout.
   2019-02-24 17:31:39 by Takahiro Kambe | Files touched by this commit (3) | Package updated
Log message:
www/drupal8: update to 8.6.10

Drupal 8.6.10 (2019-02-20)

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade
immediately after reading the security announcement and notes below:

* Drupal core - Remote code execution - SA-CORE-2019-003

Sites on 8.5.x or earlier should update immediately to Drupal 8.5.11 instead,
and plan to update to the latest 8.6.x release before May 2019 (when 8.7.0 is
released and 8.5.x security coverage ends).

Important update information

For site owners

* In addition to the above fix, this release includes the fix for #3031740:
  Updating to 8.6.8 or 8.6.9 with Drush 8 causes data loss via
  update_fix_compatibility() to prevent Drush 8 issues for sites updating
  directly from an earlier security release.

* update.php must be run after updating to ensure changes from the patch take
  effect.

* No changes have been made to the .htaccess, web.config, robots.txt or
  default settings.php files in this release, so upgrading custom versions of
  those files is not necessary if your site is already on the previous
  release.

For module developers

Some contributed module tests may need to be updated if they extend core's
test suite, due to a minor API change in a test base class.
   2019-02-09 01:09:54 by Wen Heping | Files touched by this commit (4) | Package updated
Log message:
Update to 8.6.9
Remove the patch that included in upstream

Upstream changes:
8.6.7:
This is a hotfix release for a regression affecting some Drush installations \ 
that was introduced by the fix for SA-CORE-2019-002. No other fixes are \ 
included.

8.6.8:
Changes since 8.6.7

    #2975539 by mondrake, alexpott, marcoscano, desierto: Changing machine name \ 
of image style leads to WSOD when loading widgets that used the old name
    #2859315 by quietone, heddn, jhodgdon: SQL error from profile_fields when \ 
migrating d6 (or d7) to d8 without Profile module
    #2443165 by davidwbarratt, amateescu, HOG, kostyashupenko, yched, Berdir, \ 
andypost, alexpott, tstoeckler, xjm: \ 
Drupal\Core\Entity\EntityInterface\ContentEntityStorageBase::doCreate() assumes \ 
that the bundle is a string
    #2849074 by decafdennis, alexpott, zuuperman, AdamPS, sagesolutions, tucho, \ 
xjm: SiteConfigureForm overrides value from install profile
    #3007716 by Sam152, kevin.dutra, jhedstrom, larowlan: Security update \ 
introduces breaking changes to content moderation
    #2215857 by michielnugter, Lendude, gmercer, tim.plunkett, cferthorney, \ 
marabak, olli, ericmulder1980, TwoD, sanduhrs, stella, dww, nod_: Behaviors get \ 
attached to removed forms
    #3017812 by ibustos, joachim: Language selector is immune to \ 
hook_entity_field_access in entity forms
    #2900883 by larskhansen, GaëlG, kalyansamanta, Chi, tim.plunkett, Gábor \ 
Hojtsy, joachim: Wrong documentation of \ 
Drupal\Component\Plugin\Derivative\DeriverInterface::getDerivativeDefinitions()
    #3027595 by amateescu, pmelab: Incorrect blacklist condition in WorkspaceManager
    #2725259 by sardara, andrewmacpherson, claudiu.cristea, tedbow, \ 
alwaysworking, droplet, techmsi, kwoxer, xjm, alexpott, lauriii, catch, cilefen, \ 
Cottser: [regression] Table Drag handles no longer respond to up/down arrow keys
    Revert "Issue #2725259 by sardara, andrewmacpherson, claudiu.cristea, \ 
tedbow, alwaysworking, droplet, techmsi, kwoxer, xjm, alexpott, @catch, \ 
@cilefen, @Cottser, @lauriii: [regression] Table Drag handles no longer respond \ 
to up/down arrow keys"
    #2725259 by sardara, andrewmacpherson, claudiu.cristea, tedbow, \ 
alwaysworking, droplet, techmsi, kwoxer, xjm, alexpott, @catch, @cilefen, \ 
@Cottser, @lauriii: [regression] Table Drag handles no longer respond to up/down \ 
arrow keys
    #2937073 by tim.plunkett, Saviktor, tedbow: Improve robustness of FieldBlockTest
    #2973713 by quietone, Adita, etecjdo, apmsooner, mikeryan, gnuschichten, \ 
tstoeckler: cache_key source plugin configuration not documented
    #2949555 by quietone, ankitjain28may: Correct the documentation on method \ 
UserMigrationClassTest
    #3025685 by quietone: Add error msg to assertions in MigrateSourceTestBase
    #3026840 by izus: Fix plural typo in workspaces field
    #3024452 by kfritsche, hchonov, alexpott: \ 
DatabaseStorageExpirable:setWithExpireIfNotExists is not respecting expired
    #2999908 by penyaskito: View more link in recipe cards is not fully translated
    #3028819 by alwaysworking: Update username
    #2916021 by d.olaresko, wengerk, Chi, xjm, dawehner, idebr: Update \ 
"Running tests" section in core.api.php
    #2953995 by kjay, starshaped, rachel_norfolk, Vidushi Mehta, cferthorney, \ 
HAL 9000, Eli-T, markconroy, steveparks: Update the Umami Vegan Chocolate \ 
Brownie recipe
    #3028608 by danharper, Eli-T, markconroy, Not Real: Umami - favicon
    #2940027 by jmsosso: Add change record to @deprecated for AccountInterface
    #2995150 by msankhala, tim.plunkett: Command examples in \ 
core/tests/README.md are confusing and not executable
    #3024184 by seanB, andrewmacpherson, Kristen Pol: Make the tabbing order \ 
match the visual reading order in MediaLibraryWidget
    #2668416 by Krzysztof Domański, wheatpenny, Lendude, alexpott: Wrong assert \ 
in NodeTitleTest
    #2981870 by Lendude, alexpott: Duplicate BrokenSetUpTest for BrowserTestBase
    #2809513 by Lendude, brentgees: Convert AJAX part of \ 
\Drupal\responsive_image\Tests\ResponsiveImageFieldUiTest to JavascriptTestBase \ 
and the rest to BrowserTestBase
    #3027574 by tuutti: SqlContentEntityStorage no longer update entities with \ 
certain (id) fields
    #3026043 by Berdir: ConfigEntityBase::__sleep() serializes plugin instances \ 
if they were not previously initialized
    #3021395 by quietone, alexpott: \ 
MigrateDrupalTestBase::migrateContent(['translations') does not migrate \ 
translations
    Revert "Issue #3003238 by Sam152, amateescu, Berdir: \ 
EntityStorageException: Default revision can not be deleted in \ 
content_moderation_entity_revision_delete()"
    #2987418 by quietone, Kristen Pol: Rename MigrateUpgrade tests
    #3003238 by Sam152, amateescu, Berdir: EntityStorageException: Default \ 
revision can not be deleted in content_moderation_entity_revision_delete()
    #3026470 by alexpott, jrockowitz, Joseph Zhao: ArchiveTar is throwing fatal error
    Merged 8.6.7.
    Merged 8.6.6.
    #3015992 by Krzysztof Domański, alexpott, larowlan: Not affecting spacing \ 
in PhpTransliterationTest
    #2998769 by kiamlaluno, quietone, kkalaskar: @see directive used in the \ 
wrong place outputs the wrong HTML markup
    #3000677 by catch, Shane Birley, featherbelly, alexpott, larowlan: Fatal \ 
error after upgrade to 8.6x [due to regression in extension system]
    #2955457 by pfrenssen, Chewie, unrealauk, alexpott, Pol: ConfigFactory \ 
static cache gets polluted with data from config overrides
    #3020142 by mglaman, tim.plunkett: Test module no_transitions_css has \ 
invalid hook_page_attachments
    #3007973 by tim.plunkett, lukasss, xopoc, bnjmnm, stompersly: Layout builder \ 
prevents the rendering of extra fields (like Links) on pages not using Layout \ 
Builder
    #3024259 by Pol, alexpott: [PHP 7.3] Fix \ 
EnvironmentTest::providerTestCheckMemoryLimit() notice
    #3023747 by mikelutz, heddn: D6 profile migrations assume stubs, which fail
    #2978922 by brathbone, philipnorton42, msankhala, hardikpandya, alexpott, \ 
siliconmeadow: Improve batch_process() documentation
    #2845975 by quietone, Jo Fitzgerald, aleevas, maxocub, Gábor Hojtsy: \ 
Migrate Drupal 6 user profile field value option translations
    #2701829 by alexpott, andypost, Soul88, Graber, Eduardo Morales, dawehner, \ 
pingwin4eg, catch, Berdir, jibran, httang12: Extension objects should not \ 
implement \Serializable
    #2693727 by mikelutz, sanduhrs, CalebD, ajlib, Lendude, tstoeckler, catch: \ 
Limiting options for exposed Language filters causes errors and doesn't work for \ 
special languages

8.6.9:
Changes since 8.6.8:

    #2215857 followup by gaydamaka, timmillwood, alexpott, lauriii: Regression \ 
on Internet Explorer 11
    #3031128 by alexpott, TrevorBradley, indigoxela, catch, cilefen, larowlan, \ 
jibran: Update from 8.6.7 to 8.6.8 warnings - Drupal\Core\Extension\Extension \ 
has no unserializer
    Revert "Issue #2924201 by tim.plunkett, tedbow, larowlan, xjm, jibran, \ 
Kristen Pol: Resolve random failure in LayoutBuilderTest so that it can be added \ 
to HEAD"
    #2924201 by tim.plunkett, tedbow, larowlan, xjm, jibran, Kristen Pol: \ 
Resolve random failure in LayoutBuilderTest so that it can be added to HEAD
   2019-01-19 08:33:55 by Takahiro Kambe | Files touched by this commit (3) | Package updated
Log message:
www/drupal8: update to 8.6.6

This is a hotfix release for a regression affecting some Drush installations
that was introduced by the fix for SA-CORE-2019-002.  No other fixes are
included.
   2019-01-09 12:56:17 by Patrick Welche | Files touched by this commit (3)
Log message:
drupal8 fix for:

Drupal\Core\Extension\Exception\UnknownExtensionException: The module standard \ 
does not exist. in Drupal\Core\Extension\ExtensionList->get() (line 257 of \ 
/usr/pkg/share/drupal/core/lib/Drupal/Core/Extension/ExtensionList.php)

e.g. when trying to put the site in maintenance mode.
   2019-01-04 09:17:37 by Wen Heping | Files touched by this commit (3) | Package updated
Log message:
Update to 8.6.5

Upstream changes:
Changes since 8.6.4

    #3023402 by alexpott: \Drupal\Tests\Component\Datetime\DateTimePlusTest \ 
fails on latest PHP7.3 build
    #3001997 by Krzysztof Domańskii, scott_euser, alexpott: Transliteration a \ 
string containing an unknown character (e.g. 0x80) is not valid
    #3018942 by welly, alexpott, jibran, Krzysztof Domańskii, floydm: Domain \ 
URL language detection - InvalidArgumentException: The user-entered string must \ 
begin with a '/', '?', or '#'
    #3020902 by Berdir, alexpott: PostgresqlDateSql fails to serialize
    Revert "Issue #2986725 by Mile23, devitate, alexpott: doctrine common \ 
2.9 has moved reflection"
    #3022183 by wengerk, benjifisher: Fix \ 
BlockContentAccessHandlerTest::providerTestAccess wrong coverage by early return
    #2984072 by vijaycs85, Lendude, ApacheEx, dawehner: System: Convert \ 
ErrorHandlerTest to phpunit
    #3019706 by hchonov, alexpott, sheanhoxie, jibran, dawehner: Functional JS \ 
Tests are broken if XDEBUG_CONFIG is set as an env variable
    Revert "Issue #3019706 by hchonov, jibran: Functional JS Tests are \ 
broken if XDEBUG_CONFIG is set as an env variable"
    #3021204 by maxocub: Remove maxocub from Migrate maintainers
    #3019706 by hchonov, jibran: Functional JS Tests are broken if XDEBUG_CONFIG \ 
is set as an env variable
    #2986725 by Mile23, devitate, alexpott: doctrine common 2.9 has moved reflection
    #2939908 by kjay, steveparks, spitzialist, cferthorney, danharper, Eli-T: \ 
Add an article to Umami - Dairy-free chocolate
    #3007439 by tim.plunkett, Wim Leers, xopoc: Layout builder renders Book \ 
navigation block on non-book pages
    #2927768 by justinlevi, Lendude, pritish.kumar, Wim Leers, dawehner: Update \ 
RestRegisterUserTest to use the ResourceTestBase base class instead of the \ 
deprecated RESTTestBase
    #3020550 by catch: Passing commands as a string to Process is deprecated in \ 
Symfony 4
    #3020579 by catch: TypeError: Argument 3 passed to \ 
Symfony\Component\HttpKernel\Event\FilterResponseEvent::__construct() must be of \ 
the type integer, string given [Symfony 4]
    #2618606 by dawehner, rbayliss: Update.php - Reverse proxy settings not used
    #2865344 by mpdonadio, Lendude, mbovan, organicwire, alexpott, jibran, \ 
jhedstrom, bobemoe, Berdir, larowlan: Exposed date filters 'empty' and 'not \ 
empty' are broken
    #2974274 by mitrpaka, RumyanaRuseva, joachim: exception message for \ 
unrecognized source IDs in lookupDestinationIds() should have more detail
    #2809305 by Upchuk, Pavan B S, Jo Fitzgerald, tim.plunkett, Berdir: Block \ 
Context assignment form element shows even if no options are available
    #3018774 by xjm: hook_post_update_NAME() docs do not explain batching/ parameter
    #3018539 by phenaproxima, rodrigoaguilera, alexpott: Media types cannot be \ 
created in the UI without JavaScript
    #3018764 by Wim Leers: One test case in MediaUiFunctionalTest is not \ 
actually tested due to a duplicate key
    #2998462 by AndyF, Baysaa, Siavash, tim.plunkett, millionleaves, fatmarker: \ 
Error adding Content Type Selection criteria or Context
    #3016501 by govind.maloo, andrewmacpherson, markconroy: Writing style - \ 
Umami should be capitalised when it is used as a proper noun in English
    #2916595 by phenaproxima, AdamPS, Wim Leers: File element discards \ 
attributes if #multiple
    #2883260 by kiamlaluno, yogeshmpawar, msankhala, benjifisher, alexpott, \ 
bdlangton: Replace the schema example with one actually used from a module
    #2883553 by govind.maloo, msankhala, seanB, Berdir, xjm, alexpott: Obsolete \ 
argument for hasPermission in node_node_access()
    #3016011 by mikelutz, quietone, alexpott: Reroll all migrate dump files
    #3017753 by mxr576, alexpott: MemoryBackend should validate the passed cids
   2018-12-11 10:45:54 by Patrick Welche | Files touched by this commit (3) | Package updated
Log message:
Update drupal8 to 8.6.4

Many bug fixes including:
- Breadcrumbs disappears when starting with front-page after cache rebuild
- Adding a display mode to a content type using layout, and disabling
  layout on that new display mode removes the layout_builder__layout
  field and breaks layout in already configured display modes
- Clearing the persistent entity cache every time we switch between
  workspaces is super wasteful

For full list, see:
- https://www.drupal.org/project/drupal/releases/8.6.3
- https://www.drupal.org/project/drupal/releases/8.6.4